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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

LISTING OF CLAIMS: 

1. (currently amended): A computer system connected to a data communications 

network, comprising: 

a first computer; 

a second, redundant computer that is independent of the first computer; 

wherein the first computer is configured to match with the second computer by 
comparing a first work result of the first computer with a second work result of the second 
computer; 

wherein receipt of any data from the data communications network is limited to the first 
computer; 

wherein transmission of any data to the data communications network is limited to the 
second computer; 

wherein at least an initial processing of the data received from the data communications 
network is limited to the first computer; and 

wherein the first computer is configured to convert.,, transmit to and store in the second 
computer non-verified or non-verifiable data received by the first computer only in non- 
pro cessable form. 
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2. (original): The computer system as claimed in claim 1, wherein the first computer is 
configured to verify the received data in the first computer, and wherein the first computer is 
configured to supply only verified data to the second computer in processable form. 

3. (original): The computer system as claimed in claim 1, wherein the first computer and 
the second computer are configured to independently verify the received data, and wherein only 
matching verified data are stored in the second computer in processable form. 

4. (original): The computer system as claimed in claim 1, further comprising: 
a central data memory, 

wherein direct access to internal data of the computer system contained in a central data 
memory is limited to the second computer; and 

wherein the first computer is configured to receive the internal data only upon request via 
the second computer. 

5. (original): The computer system as claimed in claim 1, further comprising: 
an independent, redundant third computer; and 

wherein the second computer is configured to match with the third computer by 
comparing the second work result of the second computer with a third work result of the third 
computer. 

6. (currently amended): A method, comprising: 
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in a first computer, classifying data received from a data communications network as 
verified data and non- verified data, and producing a first work result representing the verified 
data; 

converting the non-verified data into a non-processabie form by the first computer; 

forwarding the verified data in processable form and the non- verified data in the non- 
processable form from the first computer to a second computer; 

in the second computer, independently verifying the verified data forwarded from the 
first computer and producing a second work result based on the independent verification; 

comparing the first work result with the second work result; and 

if the first work result and the second work result match, storing the verified data in the 
second computer, 

wherein receipt of any data from the data communication network is limited to the first 
computer and wherein transmission of any data to the data communications network is limited to 
the second computer. 

7. (canceled). 

8. (original): The method of claim 6, wherein only the second computer directly accesses 
internal data contained in a central data memory, and wherein the first computer indirectly 
accesses the internal data only upon request via the second computer. 

9. (original): The method of claim 6, further comprising matching the second work result 
of the second computer with a third work result of a third computer. 
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